2019-06-24T12:13:00Z
Miriam Tover - PeerSpot reviewer
Service Delivery Manager at PeerSpot (formerly IT Central Station)
  • 0
  • 8

What advice do you have for others considering Check Point NGFW?

If you were talking to someone whose organization is considering Check Point NGFW, what would you say?

How would you rate it and why? Any other tips or advice?

92
PeerSpot user
92 Answers
DH
Support at a tech services company with 51-200 employees
Real User
Top 5Leaderboard
2022-09-25T02:52:00Z
Sep 25, 2022

This is a very good security application, both physically and as a virtual appliance.

Search for a product comparison
AK
Network Engineer at Pevans EA Ltd
User
2022-09-17T12:39:00Z
Sep 17, 2022

Generally, Check Point is a good product with a lot of security features that I would recommend to any organization.

Ranga V - PeerSpot reviewer
United Airlines at United Airlines
Real User
2022-09-08T21:31:00Z
Sep 8, 2022

Check Point is a good solution. It is a reliable solution above all.

Adriamcam - PeerSpot reviewer
Consultant at ITQS
Reseller
Top 5Leaderboard
2022-08-05T17:47:00Z
Aug 5, 2022

The tool behaves well. The only improvement that I have seen that is necessary is to improve the latency when entering the application and they must improve the support.

LD
Cloud Support - Security Admin at a tech company with 1-10 employees
User
Top 5Leaderboard
2022-08-02T07:16:00Z
Aug 2, 2022

It is an expensive tool. It's very good and effective. If you have the option or facility to acquire it, I recommend you try it first and you will love it.

alvarado - PeerSpot reviewer
Cloud Support Leader at a tech company with 51-200 employees
User
Top 5Leaderboard
2022-06-01T04:01:00Z
Jun 1, 2022

The second-generation Check Point devices are some of the best on the market.

Learn what your peers think about Check Point NGFW. Get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
655,711 professionals have used our research since 2012.
MM
Systems Engineer at HarborTech Mobility
User
Top 10
2022-05-06T23:00:00Z
May 6, 2022

Check Point licenses work very differently compared to other vendors. We need to purchase each blade in order to make it work, however, we can easily obtain a trial (evaluation) license from Check Point to get visibility for the blade. Check Point tries to maintain relationships with customers and they try to match their price with customer expectations.

Ümit Güler - PeerSpot reviewer
Consultant at KoçSistem
Real User
Top 5
2022-05-06T11:17:00Z
May 6, 2022

If you are looking for a firewall appliance that has a lot of security features, easy installation, and configuration, Check Point firewall products are the best for you.

CC
Technology at Partswerx
User
Top 20
2022-04-06T19:44:00Z
Apr 6, 2022

The support is great.

HM
Senior Solution Architect at a comms service provider with 51-200 employees
Real User
Top 20
2022-03-15T00:44:39Z
Mar 15, 2022

Check Point NGFW is trying to innovate in the market, but all the other vendors in the market are doing more the same. I rate Check Point NGFW a nine out of ten.

KM
Technical Architect at Computacenter
MSP
Top 10
2022-02-11T15:18:00Z
Feb 11, 2022

I rate Check Point NGFW nine out of 10. I would only recommend it for medium to large enterprises.

AY
Jr. ISO at BancNet, Inc.
User
Top 20
2022-01-25T10:39:00Z
Jan 25, 2022

We need more information on the ability to collaborate enterprise support.

TL
IT Security Administrator at a tech services company with 51-200 employees
Real User
Top 20
2022-01-20T10:35:08Z
Jan 20, 2022

We are a customer and an end-user. Some blades, some function blades on Check Point, are very good, however, it's not all of them. Right now, I know DLP and social inspection are a problem. New users should be aware of this. Overall, I would rate the solution at a seven out of ten.

Oscar Daniel Garcia - PeerSpot reviewer
IT Director at Facultad de Ciencias Actuariales, Universidad Anáhuac México
Real User
Top 20
2021-12-21T10:14:00Z
Dec 21, 2021

I would rate this solution a nine out of ten. This is a very good solution. It's complex because it's not too easy to use, but the brand and our partner help us with NG Firewall configuration issues or other solutions like Harmony. The university is growing every year and with that, I purchase more endpoint licenses and Harmony Endpoint because the firewall works well on the dimension and capacity. Next year, we plan to integrate Harmony Email and Office. The solution also prevents threats to Office 365.

RP
Director at TechPlayr
Real User
Top 20
2021-12-01T10:58:00Z
Dec 1, 2021

I'm leaning toward the now cloud. The appliance base has now been removed. We are now concentrating our efforts on the Azure Cloud, AWS, and other similar platforms. I believe that people must mature in order to work on it. That's where things stand. As a result, we must learn how this is implemented on cloud platforms. I would rate Check Point a seven out of ten but NGFW a six out of ten.

CA
Integration engineer at S21sec
User
Top 20
2021-11-18T15:56:00Z
Nov 18, 2021

Having the option to use a UNIX-based shell instead of being forced to use GAIA, in this case, is great. It makes Check Point very customizable.

Alessandro Bolzonella - PeerSpot reviewer
Senior IT Security Manager at a manufacturing company with 201-500 employees
User
Top 20
2021-11-18T14:30:00Z
Nov 18, 2021

The solution is a good solution and at the top of the market.

JV
Engineer at CENACE
Real User
2021-11-06T03:19:00Z
Nov 6, 2021

Check Point is easy for the configuration user. I would rate this solution as eight out of ten.

AO
Head of Technology at African Alliance Plc.
User
Top 10
2021-11-01T09:45:00Z
Nov 1, 2021

It is an awesome product!

BZ
IT System Operations Manager at Hamamatsu Photonics KK
User
Top 20
2021-10-13T18:59:00Z
Oct 13, 2021

If you don't need/use their a la carte software blades (FDE, Ransomware, etc.) you can always add on later. They are very accommodating with trial licensing to test in a proof of concept way. If you already have other third-party products that perform those functions, you can bundle Check Point's and save a bit of money consolidating them.

User
Top 20
2021-10-13T15:02:00Z
Oct 13, 2021

I would say as good as the solution is, if you are looking to get the most out of it, you should look to get a company or consultant who knows the Check Point solution inside out to assist with the setup. We found a partner who specialized in Check Point and we would not have been able to get it to the stage we have without them.

BI
Technology Architect at BearingPoint
Consultant
Top 20
2021-10-11T13:23:00Z
Oct 11, 2021

I'd advise teams to give it a try!

José Javier Dominguez Reina - PeerSpot reviewer
Project Manager at Junta de Andalucia
Real User
Top 5Leaderboard
2021-09-23T20:25:00Z
Sep 23, 2021

I would rate Check Point NGFW 10 out of 10.

ED
Senior Linux Administrator at Cartrack
User
2021-09-21T12:46:00Z
Sep 21, 2021

Check Point does cost a lot, but for me, it's worth the money I paid. Some of the products are easier to deploy. For example, the Harmony products are simpler as they have a per user/per device pricing model.

Mitchell Mugerwa - PeerSpot reviewer
Procurement Supervisor at Centenary Bank
Real User
Top 20
2021-08-30T11:45:21Z
Aug 30, 2021

I rate Check Point NGFW as a six out of ten.

MG
IT Security Manager at a retailer with 10,001+ employees
Real User
Top 5
2021-08-10T09:31:13Z
Aug 10, 2021

I would recommend this solution. However, I would advise everyone to carefully evaluate their needs against this vendor and compare them with the competition. There is a lot of strong competition between Palo Alto and Fortinet. One could have an advantage over the other for a customer's specific use case. I rate Check Point an eight out of ten.

AS
User at a financial services firm with 10,001+ employees
User
Top 20
2021-07-14T23:47:00Z
Jul 14, 2021

Not at the moment.

PI
IT Manager at a comms service provider with 51-200 employees
Real User
Top 20
2021-06-25T10:44:00Z
Jun 25, 2021

It simply works like a charm. The stability and trust in the vendor are also very important to us.

VN
TitleManager - Datacenter IT at Eaton Corporation
Real User
2021-06-15T14:52:00Z
Jun 15, 2021

Setup can be complex and it is very helpful to first plan the deployment before rushing into it. Use the support available to find out the best options to use. We would love to have more training materials and/or courses available so that I can onboard engineers in a faster way.

Ifeanyi Onyiaodike - PeerSpot reviewer
Network security engineer at Fidelity Bank
Real User
Top 5
2021-06-03T09:49:16Z
Jun 3, 2021

I would recommend Check Point to others. We are still learning as we're just about a year into using it, but so far, the support and the solution in general has been good. I'd recommend Check Point, especially to users that are looking for an affordable solution. Check Point also has a great community. They have this community where users can go to share ideas. They also have great networks. Overall, on a scale from one to ten, I would give this solution a rating of eight. Cisco dominated the African market until Check Point came along.

AN
Security Solution Architect
Real User
Top 20
2021-05-26T21:08:10Z
May 26, 2021

Overall, on a scale from one to ten, I would give this solution a rating of eight. I would definitely recommend this solution. It's a good platform for perimeter security. In an enterprise, you need good security. There's endpoint security, network security, and cloud security. Check Point's strongest point is network security; they still need to catch up on endpoint and cloud security. If you're interested in integrating all of these tools, then there are better products available. However, as far as network security is concerned, Check Point is really good.

DZ
Security product manager at RRC
Reseller
Top 20
2021-05-24T20:02:50Z
May 24, 2021

I would recommend this solution. It is a great solution for endpoint protection and threat prevention. I have been working with Check Point products for a very long time. Check Point is one of our best vendors, and they make great products. I would advise others to learn about firewalls and other Check Point solutions. They have a lot of different solutions. If you choose their firewall, it would be useful to know more about other solutions. It would be one of the ways to improve the protection of your network with Check Point. I would rate Check Point NGFW a ten out of ten.

reviewer1582053 - PeerSpot reviewer
Security Engineer at Gosoft (Thailand)
User
Top 10
2021-05-20T12:14:00Z
May 20, 2021

This is a product that I recommend.

SaifKhan1 - PeerSpot reviewer
Network Security Engineer at a consumer goods company with 201-500 employees
Real User
Top 5Leaderboard
2021-05-17T14:14:52Z
May 17, 2021

Check Point is responsible for inventing several firewall security features. In summary, this is a good product and I recommend it because it the most secure firewall on the market. I would rate this solution a nine out of ten.

Pardeep Sharma - PeerSpot reviewer
Network security engineer at a tech services company with 1,001-5,000 employees
Real User
Top 5
2021-05-14T14:53:54Z
May 14, 2021

If you are looking for deep security and have a good budget for security and firewalling then I would recommend Check Point, as it will meet the requirements. Every product has its drawbacks and advantages, but I am very happy with this solution. In my opinion, this is the best firewall in the market at the current time. I would rate this solution a ten out of ten.

Rajan Arora - PeerSpot reviewer
AVP - IT Security at a tech services company with 51-200 employees
Real User
Top 5
2021-05-10T14:21:00Z
May 10, 2021

In summary, this is a good solution that is stable, and I recommend it.

Charanjit Bhatia - PeerSpot reviewer
AGM Cyber Security CoE at Bata Group
Real User
Top 5
2021-05-08T13:39:00Z
May 8, 2021

In summary, this is an excellent product and featured consistently in Gartner for the last 10 years. They have good R&D and support services across the globe.

Real User
Top 5
2021-05-07T14:36:00Z
May 7, 2021

It's demanding for the administrator, as it takes years to get an in-depth knowledge of the platform. Otherwise, it is easy to use from day one.

Basil Dange - PeerSpot reviewer
Senior Manager at a financial services firm with 10,001+ employees
Real User
Top 5Leaderboard
2021-03-29T10:19:00Z
Mar 29, 2021

Before implementing the security gateway, you need to be sure about the license and modules that you are going to enable. This includes determining the proper size, as it can affect throughput drastically after enabling each module. This is especially true for SSL decryption. The architecture needs to be studied before finalizing, as the configuration is done remotely using the centralized smart console. All of the security gateways need to be connected to the management server for any policy configuration, and they should be available at all times.

Daphne - PeerSpot reviewer
Project Manager at Junta de Andalucia
Real User
Top 10
2021-03-26T14:01:00Z
Mar 26, 2021

Overall, this is a very complete tool.

PJ
Project Manager at SANDETEL
Real User
Top 10
2021-03-26T13:09:00Z
Mar 26, 2021

In my opinion, this solution is already quite complete with respect to our requirements.

Gonzalez - PeerSpot reviewer
Network Administrator at Secretaría de Finanzas de Aguascalientes
User
Top 20
2021-03-20T06:48:00Z
Mar 20, 2021

My advice is to always have a supplier with whom you can resolve doubts or more specific technical questions. Since the equipment requires many very technical parameters, it is helpful to have a person who understands and uses this technology correctly.

Sreegith Sreedharan Nair - PeerSpot reviewer
Senior Network Engineer at LTI - Larsen & Toubro Infotech
Real User
2021-03-18T20:43:00Z
Mar 18, 2021

My advice for anybody who is implementing this solution is to always keep an identical configuration, even interface statuses, in a VSX cluster before an upgrade to minimize upgrade failures.

reviewer1531134 - PeerSpot reviewer
Cybersecurity Engineer at Insurance Company
Real User
Top 20
2021-03-15T12:40:00Z
Mar 15, 2021

My advice for anybody who is implementing this solution is to take into consideration the throughput, security modules, and storage (logs) needs, so you can choose the appliance that best fits your organization.

MP
Network Security Engineer at a tech services company with 10,001+ employees
Real User
Top 10
2021-03-04T01:49:00Z
Mar 4, 2021

The biggest lesson that I have learned from using this product is that the TAC team is very knowledgeable and supportive. If I want to understand something or if I have doubts, then usually clear it up and make sure that I understand the logic. I have learned a lot from them. This is a product that is rich in features and my advice for anybody who is deploying it for the first time is to learn about them in advance. It is a little bit different than a CLI-based firewall and I recommend learning about all of the features before deploying it. At this point, we are happy with the results that we are getting from Check Point, and are not looking to replace it. It works as we were expecting before it was deployed. I would rate this solution a ten out of ten.

RG
Network Security Engineer at a tech services company with 10,001+ employees
Real User
Top 10
2021-03-02T19:08:00Z
Mar 2, 2021

My advice for anybody who is implementing Check Point NGFW is that if they get stuck, then visit the technical support section of the website and read the articles that are available. I have learned many things from the tech articles, and it's a good website if you want to learn about it in-depth. One of the things that I learned is that Check Point firewalls also use Linux commands. After working with Check Point, I improved my Linux skills, which is a good thing for me. I would rate this solution a nine out of ten.

reviewer1523535 - PeerSpot reviewer
IP LAN and Integrity Specialist at Chevron
Real User
Top 5
2021-03-02T15:18:00Z
Mar 2, 2021

This is a complex solution and there are other vendors that are easier to manage, but it is perhaps the best solution regardless.

PRAPHULLA  DESHPANDE - PeerSpot reviewer
Associate Consult at Atos
Real User
Top 5Leaderboard
2021-02-26T11:13:00Z
Feb 26, 2021

I think people like me love Check Point because in my experience over the years, I have not heard of a comprise where Check Point was protecting the network. As long as the devices are configured properly, this is a very small chance of being compromised. In general, the NGFW features in Check Point fulfill our requirements, which is expected from a Cybersecurity firm that has been involved in the field for a long time.

DD
Sr. Network Engineer at a tech services company with 1,001-5,000 employees
Real User
Top 10
2021-02-18T22:07:00Z
Feb 18, 2021

Get properly trained. When I entered this organization, I struggled with this firewall. There are very few good quality training programs available in the market. Or, if it is available, then it is very expensive. So, I advise new people to get properly trained because it has many feature sets, and if they do not use them with the proper knowledge, then it could worsen their situation. I am happy with the organization's progress, as they work hard on their product. It is a good lesson from a personal level: We should work hard and improve ourselves. I would rate this solution as a nine out of 10.

KK
Network Associate at a wireless company with 1,001-5,000 employees
Real User
Top 10
2021-02-17T11:56:00Z
Feb 17, 2021

The biggest lesson that I have learned from using this product is that it is good to see a company like Check Point is continuously working on the quality of their product, and we should learn from that. It is good to improve over time because it is very easy to get into the market, but it is not too easy to sustain. My advice for anybody who is implementing this firewall is to ensure that they are trained completely because it is not easy to use. Moreover, there is not much training available online, so you want to have trained with the device. This is a product with many features, which are pros, but these same features can become cons if you are not using it with complete knowledge. In summary, this is a good product and they have been improving continuously, but there are still some areas to improve. I would rate this solution an eight out of ten.

MA
Sr. Network Engineer at a tech services company with 1,001-5,000 employees
Real User
Top 10
2020-12-14T06:56:00Z
Dec 14, 2020

Check Point firewalls have many features. Before configuring it in an environment, you should know each and every feature of the firewall. You should also follow the three-level hierarchy which is recommended by Check Point. There are a few add-on features for Check Point firewalls. I only learned that by using the firewalls. I'm very happy with the way Check Point is progressing. They continue to work on their firewalls even after making their name. That is something we should follow in our lives as well: Once we have made our name, we should not stop there. We should further build the reputation of the company and product. We are very happy with the Check Point firewalls. The only thing missing, as I mentioned earlier, is that training should be increased for the firewall by the organization. Otherwise, we are very happy with investment in this solution.

AP
IT Infrastructure & Cyber Security Manager at a retailer with 501-1,000 employees
Real User
2020-11-15T06:39:00Z
Nov 15, 2020

Check this solution and see how it fits with your organization. See how easily you can manage and control the environment. The visibility and the management provided by the product is one of the most important things, other than the security features that the product has. And check the sizing carefully. Check that the machines you're going to buy are sufficient for your current needs and the future needs of your organization.

RM
Senior Network Engineer at a tech services company with 1,001-5,000 employees
Real User
2020-11-09T08:11:00Z
Nov 9, 2020

Get good training on Check Point, which is very rare to obtain at this point of time. Before implementing or deploy the product, you should be trained properly so you know all the features. It has heavy features in terms of quantity. You should know about each feature before using or deploying it. I would rate the solution as an eight out of 10.

AJ
Sr. Network Engineer at a tech services company with 51-200 employees
Real User
2020-10-13T07:21:00Z
Oct 13, 2020

I would rate the solution an eight out of 10.

BF
Senior IT Manager at a mining and metals company with 501-1,000 employees
Real User
2020-10-04T06:40:00Z
Oct 4, 2020

My advice would be to look hard at premium support options. Know what your tolerances are, and if you expect fairly quick turnaround on support incidents, go ahead and invest that money in support. Definitely take advantages of pro services, buy a block of hours, whether that's 10 hours or 20 hours, and use that to fill in the knowledge gaps, especially during deployment. If you rely on standard support during setup, depending on how complex your environment is, you may be frustrated. We did well doing what I recommended here. We bought two rounds of pro services (20 hours). I don't want to pile on standard support - it's not bad - it's just that if we were to rely only on standard support, I think our migration would have taken longer, and there might have been more frustrations. Because we had local support and because we bought pro services, it accelerated our timeline and it got us into production much quicker. From what I've seen and heard from my staff, I would rate Check Point NGFW technology a nine out of ten.

AR
Firewall Administrator at a tech services company with 1,001-5,000 employees
Real User
2020-09-27T04:10:00Z
Sep 27, 2020

When implementing the product, follow the recommendations which Check Point provides. Follow the backup for the firewall so that in case of an issue, you have a secondary firewall active. The biggest lesson I have learned is that there is a scope of improvement. Companies that are improving and providing updates frequently are growing more. In addition, improving support is a very key part of things. Check Point rates well on all these points.

AU
Network and Security Specialist at a tech services company with 51-200 employees
Real User
2020-09-23T06:10:00Z
Sep 23, 2020

This is not day-to-day firewall work, where maybe a node can do it. If you get into a trouble, you can't actually involve Check Point support all the time, especially when you won't get a response. You need to employ people who are certified. Check Point has a lot to sink in, and it's not an easy thing. You might just expose your environment, even after spending a lot of money. It is future-proof. I would rate this solution as a nine out of 10.

Rohit Gambhir - PeerSpot reviewer
Sr. Network Engineer at a consultancy with 51-200 employees
Real User
2020-09-22T07:16:00Z
Sep 22, 2020

Be knowledgeable before implementing this firewall because it has many advanced features compared to the normal firewalls in the market. If you want to use it in a better way, then you need to be trained on it. There were a few members who joined our organization who were familiar with Check Point, but they do not know about every feature which could be used and taken advantage of to better secure our network. I recommend getting proper training before using it. I would rate this solution a nine out of 10 because I am a very happy customer of Check Point. I have had a good experience with this firewall. I like is the way it is improving a lot with the times.

RG
Solutions Lead at a tech services company with 1,001-5,000 employees
Reseller
2020-09-14T06:48:00Z
Sep 14, 2020

The biggest lesson learned from using this solution is in terms of security. It is a really good product. I don't think there is anything missing from the Check Point firewalls. The features provided by the company are very good and provide what we need. It's a very good security product, as long as you have the budget. It provides modern security and the architecture Check Point provides is good. And the application side will really help any size of business to deal with traffic based on the application.

PS
Principal Network and Security Consultant at Vodafone
Real User
2020-09-14T06:48:00Z
Sep 14, 2020

If you're looking to implement Check Point as a security solution, definitely do your homework. Do some research, not just in terms of firewalls, but overall security architecture. Which ones are the leaders in the field? Which ones are there to deliver what they promise? And overall, how does the architecture work? Is it secure or not? And does it come from a team that understands how to support the solution itself? Are they consistent? Look at their track record for the past 10 or 15 years, or are they a new player? If they are, you don't know whether they're going to stay in the game or not. A good thing about Check Point is that its core product is security. They've been doing it day in and day out. You know they're there to stay in the game. You can trust them. Check Point is a proven solution. A lot of customers and clients already rely on it. And for the Next Generation Firewalls, they're coming up with new features as security threats become known. If somebody wants a secure and stable environment, Check Point is definitely the leader to go to; definitely the number-one choice. It's not only what it says on the box. In reality, I've worked with hundreds of banks and they're happy with the product because it works; in practice, it works. That's the main thing.

CL
System Architekt at a insurance company with 1,001-5,000 employees
Real User
2020-09-13T07:02:00Z
Sep 13, 2020

Since we are trying to get our customers to do more self-service, we should see more inbound traffic. So, the usage will increase in the next two years. We get more attacks from the outside these days, so it has become more important to use systems like Check Point. When I started with security 25 years ago, it was still something not everybody was aware they needed. Today, it's common sense that everybody needs to protect their perimeter. Plan first, implement last. You should first be aware of what assets you want to protect and what are your traffic patterns. You should plan your policy and network topology ahead of time, then start to implement a firewall. If you just place it there without any plan of what it's supposed to do, it doesn't make too much sense. I think planning is 80 percent of the implementation. I would rate this solution as an eight out of 10. It would be better if the support was quicker in the cases we had. Apart from that, we are happy with the functionality.

Vighnesh Rege - PeerSpot reviewer
Lead Solution Advisor at Deloitte US
Real User
2020-09-10T07:35:00Z
Sep 10, 2020

Look for a software with licenses that support the features you want. I would recommend doing an RFP before purchasing. Get in touch with Check Point's sales team and compare it with other solutions. Check Point features are always evolving. They try to stay abreast of the market. I would recommend not using older, obsolete models of Check Point because of this. I would rate this solution as an eight out of 10.

PJ
Security Administrator at R Systems
Real User
2020-09-10T07:35:00Z
Sep 10, 2020

Check Point is good. It has a lot of features which will support a lot of things in your organization, and the dashboard is quite good. There are a lot of features, such as data protection and data inspection, at a good price.

IT cloud network engineer - PeerSpot reviewer
Junior Network Specialist - Cloud Operations Engineer at a computer software company with 5,001-10,000 employees
Real User
2020-09-09T06:29:00Z
Sep 9, 2020

The biggest lesson I have learned from using Check Point firewalls is that if you know how to work with Linux, you will be able to manage almost all the features.

JM
Network Security Engineer/Architect at a tech services company with 1,001-5,000 employees
Real User
2020-09-09T06:29:00Z
Sep 9, 2020

If the person implementing it doesn't have much experience in how the solution works, with the Manager and connecting the firewall to it, and using the SmartConsole, they should try to go through the CCSA materials for Check Point certification. Check Point is easy to work with on a daily basis. Sometimes we get new people working here and they can add rules straight away on the policies and push policies. But if they need to deploy a firewall and they are not used to Check Point and how it works and the components, it's not that straightforward. With competitors like Fortinet, you just have to access the HTTPS of the FortiGate and it's like configuring a router, which is much easier. With Check Point, you need to read some manuals before you start deploying the firewall. The biggest lesson I have learned from using Check Point firewalls is that if you lose the Manager you lose the ability to manage the firewall policies, which is, in my opinion, the biggest difference when compared to other vendors. Because, for example, if the Manager stops working and the server where you have the Manager gets stuck, you have no way of managing the policies directly on the firewall.

Sathish Babu - PeerSpot reviewer
Solutions Consultant at Hewlett Packard Enterprise
Real User
2020-09-08T05:15:00Z
Sep 8, 2020

The biggest lesson I have learned from using Check Point's firewalls is that they are not complex. I'm expecting a lot of solutions from Check Point and if there are more solutions from them, that would be great. I would like to see more product development. Overall, I would rate it at 10 out of 10. It's the best firewall in the market.

Ifeanyi Onyiaodike - PeerSpot reviewer
Network security engineer at Fidelity Bank
Real User
Top 5
2020-09-07T05:57:00Z
Sep 7, 2020

I would recommend going into Check Point solutions. Although Check Point has the option of implementing your firewall on a server, I would advise implementing it on a perimeter device because servers have latency. So deploy it on a dedicated device. Carry out a survey to find out if the device can handle the kind of workload you need to put through it. Also, make it a redundant solution, apart from the Management Server, which can be just one device. Although I should note that up until now, we have not had anything like that.

Oswaldo Gimeno - PeerSpot reviewer
Network Engineer at Getronics
Real User
2020-09-07T05:57:00Z
Sep 7, 2020

* Check the price first. * For migrations between different vendors, it's a nightmare. You need to do some tasks manually, otherwise it doesn't work when you migrate it. * Check the performance if it is working as expected. * Try to keep it simple. It is a good product. I would rate the solution as an eight out of 10.

Steve Vandegaer - PeerSpot reviewer
Senior Engineer Security at NTT Security
Real User
2020-09-06T08:04:00Z
Sep 6, 2020

Make sure you have a good partner doing Check Point work for you because, as a direct client, it's very hard to get the necessary skills in-house, unless you're a very big company. Contact Check Point and ask them which partner they recommend and go that route. Don't try to do it yourself. The firewall is too complex to set up and maintain yourself, without the assistance of people who do it every day. Learn and get experience with it. Don't be overwhelmed. When you start with it all the features and all the tips and tricks that you need to know to maintain it, it can be overwhelming. Like I said, the learning curve is very steep, and when you start with it, it's going to look like, "Whoa, this is impossible." But stick with it and when you get some experience it's going to be okay. It's a difficult product, but once you get the hang of it, it's one that's really nice to work with. We still run into issues from time to time, but Check Point products are very manageable and fun to work with. Check Point is my favorite vendor. I like working with it a lot. I would rate Check Point's mainstream solutions at eight or nine out of 10, and the same for the chassis. I would rate the SMBs around a six. I don't really like those too much. Overall, Check Point is an eight, because most people are going for the mainstream solutions and those are very good.

AnkurSingh - PeerSpot reviewer
Technical Support Engineer at AlgoSec
Real User
2020-09-06T08:04:00Z
Sep 6, 2020

Anyone who is new to Check Point Firewalls should have the basic understanding and training so it becomes easy to deploy and implement. You can go onto YouTube and find various training videos regarding Check Point, where you can get a basic understanding of the Check Point Firewall. I would rate this solution as an eight out of 10.

Sunil Redekar - PeerSpot reviewer
Security Engineer at Hitachi Systems
Real User
2020-09-03T07:49:00Z
Sep 3, 2020

If you are making a plan of action for the installation of firewalls, clarify with the Check Point tech engineers that all is proper and good. We always arrange a Check Point standby engineer for this activity, because if anything goes wrong, then they can help on the call. I would rate this solution as an eight out of 10.

Matt Millen - PeerSpot reviewer
Network & Systems Administrator I at DMH
Real User
2020-09-02T06:45:00Z
Sep 2, 2020

Do your research and look into cloud solutions. Check Point offers many cloud services, and that's where everything's moving, towards the future. Research the different appliances and solutions that Check Point offers and find out what works best for your particular situation. The biggest lesson I have learned from using Check Point's firewalls is not to be afraid to call for help. There are times where I may be trying to figure something out myself, when in all reality, all I need to do is call Check Point customer support. They'll explain to me why something is configured a certain way, or if there's a better way that I could go about configuring something, and things of that nature. They have been very helpful and have saved me time, anytime I've called. I can't think of any additional features their NGFW needs that we don't already have access to. I know there are features such as moving the dashboard toward the cloud, and I think that's beneficial, but it's something they already offer. We just don't take advantage of it right now.

AK
Sr. Network Engineer at a insurance company with 5,001-10,000 employees
Real User
2020-09-01T05:25:00Z
Sep 1, 2020

Make sure you get good training on Check Point's firewall, and it would be good if you have working experience on the device. Using Check Point, I have learned that we need to serve our remote users as well, and Check Point is a firewall which is capable of doing that.

SJ
Network Security Administrator at AlgoSec
Real User
2020-08-30T08:33:00Z
Aug 30, 2020

Check Point Next Generation firewalls are very good. They have a lot of features in one box and they're not that expensive. They support a lot of features, including antivirus, data loss prevention, and the central management is very good. We can configure all the firewalls through the central management. They have many things in a small package. I would recommend them. The biggest lesson I have learned from the solution is that it has a lot of features that I was not aware of. The dashboard is quite simple and it's not complex to use. We make changes on this Checkpoint Firewall as per customer demand. If they want to add a rule on the firewall we do that, and if they want to remove something we remove it for them. If they want to change the position of some rules or to allow or deny any kind of traffic, we do that for them. In our organization we have a team of 20 - 25 network security admins. Sometimes the network team will also implement changes and they are about 25 people. Sometimes we get the help of our managers to approve the changes or validate whether the change has been implemented correctly or not. If I sum it up, it's a team of about 100 people who directly use the solution, and they also take care of deployment and maintenance.

KK
IT Specialist at a tech services company with 10,001+ employees
Real User
2020-08-30T08:33:00Z
Aug 30, 2020

This is a good solution. I would recommend to take advantage of as many features as you can. It has many features, and to protect security, you should use all the best features that you can. As soon as the company will grow, we will definitely increase our usage of the firewall. We have already increased our usage due to employees working from home. The biggest lesson that I learned is we can use the features of a firewall security to protect our environment. Also, rather than deploying multiple firewalls, we can configure a centralized management system, and this saves time. I would rate this solution an eight out of 10.

Nikhil Dhawan - PeerSpot reviewer
Associate Consultant at a tech services company with 10,001+ employees
MSP
2020-08-27T07:02:00Z
Aug 27, 2020

I would recommend this solution because it is a firewall that replaces many other devices. Money-wise, it is good. It also has many features. These can be utilized to protect your environment from outside threats. You should have a couple of training and hands-on experiences before deploying the changes by yourself on the firewall. It has many features of which people are not knowledgeable so they usually utilize them. With time, technology is getting better. Check Point is one of these examples. They have changed their products completely from the old R80 version, where their UI and CLI were much different. I would rate this solution as a nine out of 10.

IK
Security Expert at a aerospace/defense firm with 10,001+ employees
Real User
Top 5
2020-08-19T07:57:00Z
Aug 19, 2020

My best advice would be, if you are not as skilled, that while you don't really need to use the Check Point Professional Services, you should use a partner that has good knowledge of the device. If it's just a straightforward deployment without all the features, it may look simple but there are too many options. Eventually, you may use 30 percent of them. I don't think you will use 100 percent of all the features that are available. Overall, I'm a little bit disappointed because of the numerous bugs that there are. I would rate it at seven out of ten because their management platform and the dashboard. It's the most intuitive and user-friendly in day-to-day operations, as long as you're not dealing with the bugs.

GG
Security Engineer at a tech services company with 1,001-5,000 employees
Real User
2020-08-12T07:01:00Z
Aug 12, 2020

If you use Apple computers or Linux, the product may not be a good choice for you. I would rate the solution as a seven point eight out of 10. They can improve some things. They can make it more flexible in terms of its software. It is a good solution, and I like it. For me, it's the best firewall solution.

DmitryPavlukhin - PeerSpot reviewer
Security Analyst at HOST
Real User
2020-08-02T13:27:00Z
Aug 2, 2020

Good solution - I recommend it.

Kirtikumar Patel - PeerSpot reviewer
Network Engineer at LTTS
Real User
Top 5Leaderboard
2020-07-30T10:05:00Z
Jul 30, 2020

This is a very good and best solution as a perimeter device for NGFW.

reviewer1396851 - PeerSpot reviewer
Deputy Manager (Systems) at State Bank of India
Real User
2020-07-29T19:59:00Z
Jul 29, 2020

Check Point gives you flexibility and eases the management with meeting organisation’s security need. But before choosing proper sizing has to be done.

AA
Sr. Security Engineer at EY
Real User
2020-07-22T08:17:00Z
Jul 22, 2020

Get a team who has expertise on this product and educate your team. Give them training. If Check Point is using a new version, make sure your team is aware of that. If there are any changes, let them know and make them comfortable working around this product because we have had some issues due to lack of expertise. If you don't have an expert in-house team for implementation, I would strongly recommend getting help of the Check Point professional services team. There are a few third-party operational services, but I would go with Check Point professional services. We are planning to increase our usage of the solution. Every project that we take on has Check Point security products as part of the solution. I would give this solution an eight out of 10 because of the support. They take too much time when they should give you a result.

TH
Network Engineer at a legal firm with 1,001-5,000 employees
Real User
2020-07-22T08:17:00Z
Jul 22, 2020

It's a good product. My advice would be to get some training or watch some videos on using it. You do need a bit of training on it. Initially, there is quite a steep learning curve. My comfort level with it is on and off. I've been at my company for a year and I'm starting to get comfortable, but it's such a big product that unless you're using it all day, every day, you wouldn't master it. If that was all you were doing every day, then it would probably take you three or four months to get the hang of it. I would rate Check Point NGFW an eight out of ten. It's not as easy as the other firewalls I've used but that's probably due to the large feature set.

Amit Kuhar - PeerSpot reviewer
Network Security Consultant at Atos Syntel
Reseller
2020-07-14T08:15:00Z
Jul 14, 2020

It is a good firewall. It has returned good performance. We are happy with the product. I would rate the product as a nine out of 10.

BG
IT Operation Manager at a transportation company with 1,001-5,000 employees
Real User
2020-06-28T08:51:00Z
Jun 28, 2020

My advice for anybody who is implementing this solution is to ensure that they have good support from local experts. The biggest lesson that I have learned from using this product has to do with the capabilities of the smallest models. Care should be taken to select the appropriate one for your environment. I would rate this solution an eight out of ten.

RF
Manager for Operations, Security and Management at REN - Rede Energeticas Nacionais, S.A.
Real User
2020-06-28T08:51:00Z
Jun 28, 2020

Overall, I am pretty happy with Check Point firewalls. My advice for anybody who is implementing this product is to get somebody with experience to help choose the correct, stable version, and assist with the configuration. All of the new features take time to implement properly, but if the correct steps are followed then they won't run into problems when the system goes into production. I would rate this solution a nine out of ten.

AJ
Sales Engineer at Unistar
Real User
2020-06-25T10:49:23Z
Jun 25, 2020

This is the number one, best firewall on the market. My biggest complaint is that the centralized management has to be improved. I would rate this solution a ten out of ten.

ChandanSingh - PeerSpot reviewer
Senior Technical Consultant at Ivalue Infosolution
Consultant
2020-06-17T10:55:58Z
Jun 17, 2020

Until earlier this year, the consolidated management was application-based and required installation. As of recently, they have launched web-based management, as well as cloud-based management. This is an upgrade that I had been waiting for because we no longer have to go to the dashboard. Instead, we just enter the IP into chrome and you get the dashboard on the web page, without having to install anything. This is a very good product, although there is always room for improvement. I would rate this solution a nine out of ten.

reviewer1266306 - PeerSpot reviewer
Deputy Manager - Cyber Security at a transportation company with 5,001-10,000 employees
Real User
2020-01-14T11:08:00Z
Jan 14, 2020

Both IN and OUT traffic is managed by Check Point. We are happy with Check Point technology including the protection, management, and the ability to secure the enterprise network against advanced threats.

JG
Network Manager at a retailer with 10,001+ employees
Real User
2019-07-07T06:35:00Z
Jul 7, 2019

I have a basic network firewall and not the advanced feature, full feature security system. I think they are the best. Still, for instance, when installing a tunnel in Check Point vs installing a tunnel in Cisco, the difference is that in Check Point nothing makes sense, and in Cisco you have the duration capability, the hierarchy of the configuration. I would rate this solution as 8 out of 10. Mostly because of configuration problems - problems with configuring VPNs, and panels, etc.

RA
Security Engineer at Tenece Professional services
Reseller
2019-07-02T11:50:00Z
Jul 2, 2019

On a scale from one to 10, I would rate this product a nine. Nobody's perfect.

SA
Network Administrator at N S PHARMACY SDN.BHD.
Real User
2019-06-24T12:13:00Z
Jun 24, 2019

I would advise anyone to try Check Point. I would rate this solution 7.5 out of 10. I think they should make their licensing simpler.

Related Questions
Yunus Yavuz - PeerSpot reviewer
Product Manager at Neteks
Nov 10, 2022
Hi peers,  I am a Product Manager at a small computer networking company. At the moment, I am researching Check Point's products. Is Check Point's software compatible with other products (including firewall products, servers, and more)? If so, which products? Are there products that are not compatible with Check Point's software? In addition, can you provide any specific documentation that ...
See 1 answer
Larry Chisholm - PeerSpot reviewer
Network Engineer at Solvonex
Nov 10, 2022
Checkpoint is an INCREDIBLY secure, but inherently frustrating platform to manage.    The gui/cli must often be used together to effect the changes you're looking for.   Don't get me started on the gaia hardware management interface.    If you must buy it, ensure that you get support.     Personally, I'll take Fortinet, Palo Alto or even Juniper SRX over anything checkpoint.
Netanya Carmi - PeerSpot reviewer
Content Manager at PeerSpot (formerly IT Central Station)
Feb 3, 2022
Why?
See 2 answers
Oct 24, 2021
Azure Firewall is easy to use and provides excellent support. Valuable features include integration into the overall cloud platform, autoscaling, and the ability for users to create virtual IP addresses. The cost of the solution is also competitive. Check Point NGFW solution offers zero-day protection and provides absolute in-depth visibility with a multi-layer, multi-blade approach. This solution has a Smart Controller that allows you to manage all firewalls from one single location. It also has good antivirus protection and knowledgeable, responsive support. Check Point NGFW is cost-effective and provides valuable support to get through required compliance audits. For Azure Firewall you have to specify each IP address used. We also found Azure to be challenging to implement from region to region, as it does not currently offer a universal approach across regions. Support can be very slow to respond and has caused us some downtime, affecting productivity and overall satisfaction. Check Point NGFW VPN can be very complex to set up. The deployment can be more challenging than many other solutions on the market. Although once fully deployed, things do get easier. Debugging can also be very difficult and makes it seem less stable than other solutions out there. Training and support could be better overall. Conclusion Azure is great, especially since almost everyone is part of the Azure ecosystem. However, it may not be the best solution for larger enterprises, as stability is limited, and the scale-up scale-out approach needs improvement. Check Point can be very challenging to set up and deploy, but the unique multi-layer, multi-blade approach gives greater flexibility and transparency, which makes it a great option for larger enterprises with more complex, intricate needs.
Anil Redekar - PeerSpot reviewer
Senior Network Engineer at Infosys
Feb 3, 2022
Check Point firewall does a deep inspection of packets till Layer 7 and is more compatible with the organizational environment.  The Azure firewall is also a cloud-based security solution that also provides Advance Threat Protection. 
Download Free Report
Download our free Check Point NGFW Report and get advice and tips from experienced pros sharing their opinions. Updated: November 2022.
DOWNLOAD NOW
655,711 professionals have used our research since 2012.